An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.
CVSS Details
- CVSS 3.1 Base Score: 5.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw32-glib2Upgrade glib2-testsUpgrade glib2-staticUpgrade glib2-famUpgrade mingw32-glib2-staticUpgrade glib2-develUpgrade glib2-docUpgrade glib2Upgrade mingw64-glib2Upgrade mingw64-glib2-static | Sep 12, 2024 | May 7, 2024 |
| Alpine Linux | — | Upgrade glib | Aug 22, 2024 | May 7, 2024 |
| Debian | — | Upgrade glib2.0 | May 10, 2024 | May 7, 2024 |
| Gentoo Linux | — | Upgrade dev-libs/glib. | Jun 24, 2024 | May 7, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade glib2 | May 13, 2025 | May 7, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade glib2 | Oct 9, 2024 | May 7, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade glib2 | Oct 9, 2024 | May 7, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade mingw32-glib2-staticUpgrade glib2-staticUpgrade mingw64-glib2-staticUpgrade glib2-famUpgrade mingw64-glib2Upgrade glib2-develUpgrade glib2Upgrade glib2-docUpgrade mingw32-glib2Upgrade glib2-tests | Oct 16, 2024 | May 7, 2024 |
| Redhat_linux | — | Upgrade glib2-staticUpgrade mingw64-glib2Upgrade mingw64-glib2-debuginfoUpgrade glib2-debugsourceUpgrade mingw32-glib2-staticUpgrade mingw32-glib2Upgrade glib2-testsUpgrade mingw64-glib2-staticUpgrade glib2-develUpgrade glib2-famUpgrade glib2-tests-debuginfoUpgrade glib2-debuginfoUpgrade glib2-devel-debuginfoUpgrade glib2Upgrade mingw32-glib2-debuginfoUpgrade glib2-docNo solution existsUpgrade glib2-fam-debuginfo | Sep 10, 2024 | May 7, 2024 |
| Rocky_linux | — | Upgrade glib2-testsUpgrade glib2-debuginfoUpgrade glib2-fam-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-debugsourceUpgrade glib2-devel-debuginfoUpgrade glib2-staticUpgrade glib2Upgrade glib2-develUpgrade glib2-fam | Sep 17, 2024 | May 7, 2024 |
| Suse | — | Upgrade glib2-develUpgrade libgmodule-2_0-0-32bitUpgrade typelib-1_0-GLibUnix-2_0Upgrade libglib-2_0-0Upgrade glib2-tests-develUpgrade glib2-devel-32bitUpgrade libgio-2_0-0-32bitUpgrade typelib-1_0-Gio-2_0Upgrade glib2-langUpgrade gio-branding-upstreamUpgrade libgobject-2_0-0Upgrade libgio-2_0-0Upgrade libgmodule-2_0-0Upgrade libgirepository-2_0-0Upgrade typelib-1_0-GIRepository-3_0Upgrade typelib-1_0-GModule-2_0Upgrade libgio-famUpgrade libgthread-2_0-0Upgrade glib2-toolsUpgrade gio-branding-SLEUpgrade typelib-1_0-GLib-2_0Upgrade libglib-2_0-0-32bitUpgrade typelib-1_0-GObject-2_0Upgrade glib2-devel-staticUpgrade glib2-docUpgrade libgthread-2_0-0-32bitUpgrade glib2-tools-32bitUpgrade libgobject-2_0-0-32bit | May 30, 2024 | May 7, 2024 |
| Ubuntu | — | Upgrade libglib2.0-0Upgrade libglib2.0-0t64Upgrade libglib2.0-bin | May 17, 2024 | May 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub